It's accompanied with an email from the "IRS" saying there is a refund.
Notice the arbitrary redirect technique. Cross-User attacks are going to
start coming out of the woodwork very soon and creating "misplaced trust".